Security Considerations

This page describes the security best practices for Extenders and their connection and data transfer between the different Flexera products installed in your environment.

Custom encryption keys

The security considerations described below support a smooth migration of snowpacks and inventory files from the Inventory Agents to Flexera One SaaS Management via the Extenders.

The Inventory Agent encrypts the inventory result, called snowpack files, using either a default encryption key or custom keys. For increased security, and for a safe migration to Flexera One SaaS Management without reverting to the default keys provided, the Extender also provides an option to use your own keys for encryption and decryption of the snowpack/inventory files. For step-by-step instructions on how to configure custom encryption keys in Extender, see Configure custom encryption keys.

Data encryption

The encryption/decryption files created and the data at rest stored by the Extenders are compressed and then secured with AES 128 CBC.

Identified issues

• Possible memory issues can occur when larger snowpack files are used.

• A performance delay can be expected due to the added encryption and decryption steps in the configuration.